IN THE CLAIMS 

Please amend the claims as follows: 

1. (currently amended) A method for controlling an information processing apparatus , said 
method comprising: 

security hardware for storing security key information in a security hardware se 
that it can be freely road and written ; 

OS start admission means for in response to an operating system attempting to 
start, determining by an OS start admission circuit whether or not input data for user 
certification is valid when an OS starts based on said security key information read from 
said security hardware^ and permitting said operating system admitting the OS to start if 
the when said determination result is positive; 

security key information restoration means for restoring the said security key 
information in the said security hardware by a security key information restoration circuit 
based on predetermined data for restoratio n, wherein said predetermined data for 
restoration is generated when generating said security key information within said security 
hardware in order to render said security key information freely restorable and is stored 
in an auxiliary storage ; 

OS start type selection means for selecting and selectively executing either a first 
type OS start for generating to generate a first system status in which said security key 
information restoration means is operable (hereafter, referred to as a "first system status") 
and operating circuit can operate said OS start admission means circuit or a functionally 
restricted second type OS start for generating to generate a functionally restricted second 
system status in which said security key information restoration circuit means is 
inoperable (hereafter, referred to as a "second system status") and not operating cannot 
operate said OS start admission circuit; means, and said method causing a computer to execute: 
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a cancellation step in which cancellation means cancels canceling the operation of 
said OS start admission means circuit by a cancellation circuit as to the said first type OS 
start after it is generated ; and 

a cancel release step in which cancel release means releases the releasing 
cancellation of the operation of said OS start admission means circuit by said cancellation 
m e ans circuit after the said first type OS start having the operation of said OS start 
admission means circuit canceled by said cancellation moans is circuit has been executed 
at least once. 

2. (currently amended) The method of for controlling an information processing apparatus 
according to Claim 1, wherein the said input data for user certification is the data keyed in by 
the an user on the said first type OS start. 

3-21. canceled 

22. (new) The method of Claim 1, wherein said first and second type OS starts are starts 
based on the same OS stored in the same auxiliary storage, and when starting said operating 
system, said OS start type selection circuit detects whether or not a predetermined user operation 
is performed so as to select and execute said first type OS start or said second type OS start. 

23. (new) The method of Claim 1, wherein said first and second type OS starts are starts 
based on two operating systems, each being stored in a different auxiliary storage, and when a 
second operating system is readable from said auxiliary storage storing said second operating 
system, said OS start type selection circuit selects and executes said second type OS start in 
preference over said first type OS start. 
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24. (new) A computer readable storage medium having a computer program for controlling 
an information processing apparatus, said computer readable storage medium comprising: 

instructions for storing security key information in a security hardware; 

instructions for, in response to an operating system attempting to start, determining 
by an OS start admission circuit whether or not input data for user certification is valid 
based on said security key information read from said security hardware, and permitting 
said operating system to start when said determination result is positive; 

instructions for restoring said security key information in said security hardware 
by a security key information restoration circuit based on predetermined data for 
restoration, wherein said predetermined data for restoration is generated when generating 
said security key information within said security hardware in order to render said security 
key information freely restorable and is stored in an auxiliary storage; 

instructions for selectively executing either a first type OS start to generate a first 
system status in which said security key information restoration circuit can operate said 
OS start admission circuit or a second type OS start to generate a second system status 
in which said security key information restoration circuit cannot operate said OS start 
admission circuit; 

instructions for canceling the operation of said OS start admission circuit by a 
cancellation circuit as to said first type OS start; and 

instructions for releasing cancellation of the operation of said OS start admission 
circuit by said cancellation circuit after said first type OS start having the operation of 
said OS start admission circuit canceled by said cancellation circuit has been executed at 
least once. 
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25. (new) The computer readable storage medium of Claim 24, wherein said input data for 
user certification is data keyed in by an user on said first type OS start. 

26. (new) The computer readable storage medium of Claim 24, wherein said first and second 
type OS starts are starts based on the same OS stored in the same auxiliary storage, and when 
starting said operating system, said OS start type selection circuit detects whether or not a 
predetermined user operation is performed so as to select and execute said first type OS start or 
said second type OS start. 

27. (new) The computer readable storage medium of Claim 24, wherein said first and second 
type OS starts are starts based on two operating systems, each being stored in a different auxiliary 
storage, and when a second operating system is readable from said auxiliary storage storing said 
second operating system, said OS start type selection circuit selects and executes said second type 
OS start in preference over said first type OS start. 
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